----- Original Message -----
From: "Asbjorn Hojmark" <Asbjorn@Hojmark.ORG>
> > ip nat inside source static tcp 192.168.1.2 21 interface dialer0 21
>
> Kommandoen siger: "Hvis der kommer noget FTP fra Internet mod
> adressen på dialer0 (dvs. din WAN-adresse), så send det videre
> til 192.168.1.2".
> Jeg går ud fra, din FTP-server har adressen 192.168.1.2?
jep!
>Kan den> pinges fra routeren?
jep!
>
> Har du noget filter på, der kunne tænkes at forhindre det?
de skulle hedde permit any any så det tror jeg ikke, men....
> Send evt. din konfiguration (renset for passwords).
****************************************************************************
Current configuration : 2059 bytes
!
version 12.1
no parser cache
no service single-slot-reload-enable
no service pad
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
service password-encryption
!
hostname xxxxxxxx
!
logging buffered 8192 debugging
logging rate-limit console 10 except errors
logging console warnings
enable secret xxxxxxxxxxxxxxxx/
!
clock timezone MET 1
clock summer-time MET-DST recurring last Sun Mar 2:00 last Sun Oct 3:00
ip subnet-zero
no ip finger
ip dhcp excluded-address 192.168.1.2
ip dhcp excluded-address 192.168.1.254
!
no ip dhcp-client network-discovery
!
!
!
interface Loopback0
no ip address
!
interface Ethernet0
ip address 192.168.1.1 255.255.255.0
ip access-group 101 in
ip access-group 101 out
ip nat inside
no keepalive
!
interface ATM0
no ip address
ip access-group 100 in
ip access-group 100 out
no atm ilmi-keepalive
pvc 0/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
bundle-enable
dsl operating-mode ansi-dmt
!
interface Dialer0
ip address negotiated
ip access-group 100 in
ip access-group 101 out
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp pap sent-username xxxxxxx password xxxxxxxxxxx
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
ip route 192.168.0.0 255.255.0.0 192.168.1.254
no ip http server
!
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.1 23 interface Dialer0 23
ip nat inside source static tcp 192.168.1.2 21 interface Dialer0 21
ip nat inside source static 192.168.1.2 62.79.91.45 extendable
access-list 1 permit 192.168.0.0 0.0.255.255
access-list 100 permit ip any any
access-list 101 permit ip any any
dialer-list 1 protocol ip permit
!
line con 0
exec-timeout 60 0
password xxxxxxxxxxxx
login
transport input none
stopbits 1
line vty 0 4
exec-timeout 60 0
password xxxxxxxxxxxxxx
login
!
scheduler max-task-time 5000
sntp server 212.54.64.202
sntp server 212.54.64.203
end
xxxxxxx#ping 192.168.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
****************************************************************************
/Alex